Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/452/recSrOcVEYA_bjGHJMSwXcVsa8w.roa
File:                     recSrOcVEYA_bjGHJMSwXcVsa8w.roa (raw, json)
Hash identifier:          QXgWV0NfmInV7Pmlv4/o2IvEVTo9bVHHVenYWQ8hU6E=
Subject key identifier:   AD:E7:12:AC:E7:15:11:80:3F:6E:31:87:24:C4:B0:5D:C5:6C:6B:CC
Certificate issuer:       /CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
Certificate serial:       65
Authority key identifier: D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/recSrOcVEYA_bjGHJMSwXcVsa8w.roa
Signing time:             Wed 03 Jun 2026 17:25:18 +0000
ROA not before:           Wed 03 Jun 2026 17:25:18 +0000
ROA not after:            Sat 15 May 2027 01:30:02 +0000
asID:                     2519
IP address blocks:        120.51.192.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D67891B94ED9E557E779746BFA23E03D1ED234EE
        Validity
            Not Before: Jun  3 17:25:18 2026 GMT
            Not After : May 15 01:30:02 2027 GMT
        Subject: CN=ADE712ACE71511803F6E318724C4B05DC56C6BCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1f:76:8b:c3:50:b7:99:85:84:ec:6c:27:7b:
                    06:9e:d6:b2:cb:7d:0f:6d:e3:08:8c:9d:09:29:c4:
                    ee:8d:04:8d:80:4b:c0:11:e3:a2:5d:9b:2e:55:9a:
                    0c:83:d6:99:c6:17:f2:a4:7d:5c:73:39:03:74:a2:
                    e7:d0:fe:a5:f0:35:9e:66:f8:c6:ab:f9:22:47:6d:
                    39:73:c2:b4:77:6f:bf:6f:98:67:1a:38:af:10:8e:
                    a2:14:15:25:29:df:f3:64:fb:95:3c:b6:25:08:76:
                    7c:da:e4:c8:24:01:06:cd:f6:a2:2b:c3:b2:88:65:
                    2a:85:15:e1:df:24:ac:ef:66:98:fd:e7:49:cd:e2:
                    69:60:b4:39:44:de:d2:3a:bc:fd:20:b7:4e:eb:4e:
                    b1:7a:56:14:71:4b:87:19:81:65:15:6f:e0:5e:2e:
                    1c:7c:9e:51:35:dd:42:18:d8:a9:0f:76:a8:16:35:
                    97:58:6b:db:30:de:da:48:cf:8c:7b:2b:04:7d:47:
                    e0:e5:03:6a:49:24:9a:2c:79:75:7b:39:cd:09:17:
                    f6:43:f2:a6:20:1c:03:f4:dc:2b:51:5b:7f:2a:04:
                    60:7e:90:ee:74:ab:0a:d8:3b:29:e1:5b:5f:22:71:
                    bf:07:c3:ce:b9:f1:b4:36:dd:86:7a:b3:89:7d:9d:
                    15:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:E7:12:AC:E7:15:11:80:3F:6E:31:87:24:C4:B0:5D:C5:6C:6B:CC
            X509v3 Authority Key Identifier:
                keyid:D6:78:91:B9:4E:D9:E5:57:E7:79:74:6B:FA:23:E0:3D:1E:D2:34:EE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/1niRuU7Z5VfneXRr-iPgPR7SNO4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1niRuU7Z5VfneXRr-iPgPR7SNO4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/452/recSrOcVEYA_bjGHJMSwXcVsa8w.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.51.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         a3:25:e8:24:e6:91:c4:e7:cc:1a:15:8c:a5:d1:c8:7e:1f:6c:
         f8:7d:dd:85:4d:ae:e4:d0:51:42:b6:5d:2e:81:46:82:a0:0a:
         20:e4:12:f9:db:87:08:05:9f:22:eb:32:bc:37:63:bc:a2:e8:
         ac:32:5f:fe:84:e2:f3:19:16:9a:fc:43:8d:70:13:ed:9d:a5:
         cb:43:08:1c:9c:92:62:24:ef:27:26:58:52:49:30:28:20:ba:
         f0:a9:8c:43:df:0b:f9:40:36:b2:c2:bf:70:ad:b6:0b:5b:96:
         d1:59:fd:87:bf:15:6c:cb:c9:76:62:fd:2d:ac:8e:1a:f5:90:
         58:a7:8c:c3:76:18:c8:5a:d2:3a:4f:a4:27:6b:58:d5:e8:bb:
         13:4a:c5:46:08:8c:03:6e:af:94:c0:78:b7:e4:e9:ca:18:0c:
         5e:38:6e:70:83:04:cd:f6:3f:fc:2e:92:1c:0b:d4:57:ef:36:
         8b:47:c5:4e:c3:b0:89:ce:cb:01:14:8b:d3:3a:8f:4b:20:a6:
         f6:3a:a4:aa:31:70:ab:07:45:fd:5c:7f:4d:a8:31:90:5a:53:
         45:bb:4f:ef:a1:1c:14:57:02:eb:ec:46:9a:64:0f:52:e8:33:
         57:f4:2f:67:89:0e:af:77:d7:8a:b0:fe:8a:bc:1e:c5:89:52:
         58:4c:76:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 12:42:22 2026 by rpki-client